Privacy Policy

1. Data controller

Aleksandr Lutkov
Vasil Chekalarov 14, ent. A, apt. 1, 9027 Varna, Bulgaria
Email: info@complytiq.com
Phone: +359 877 934 915

2. Hosting

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you access this website, Cloudflare processes technical connection data such as your IP address, browser type, the page accessed, and the time of access. This processing is necessary for the delivery of the website (Art. 6(1)(f) GDPR — legitimate interest). Cloudflare is certified under the EU-US Data Privacy Framework. See Cloudflare's privacy policy for details.

3. Analytics

This website uses no analytics tools and sets no tracking cookies. No personal data is collected for analytics purposes.

4. Contact and booking

When you contact us via email or the contact form, we process the data you provide (name, email address, message content, website URL if provided) to respond to your inquiry and, if applicable, to prepare a service proposal. Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures). We store this data for the duration of the business relationship and for as long as legally required (up to 10 years for tax-relevant correspondence).

If you book a call via Calendly, Calendly Inc. processes your scheduling data under its own privacy policy. See Calendly's privacy policy.

5. Payment processing

Payments are processed via Stripe (Stripe, Inc., 354 Oyster Point Blvd, South San Francisco, CA 94080, USA). Stripe processes payment data (card number, billing address, transaction details) as a data processor on our behalf and as an independent controller for fraud prevention. Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Stripe is certified under the EU-US Data Privacy Framework. See Stripe's privacy policy.

6. External fonts

This website loads fonts from Google Fonts (Google LLC) and Fontshare (Indian Type Foundry). When loading the page, your browser connects to these servers, transmitting your IP address. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in uniform typography). See Google's privacy policy.

7. Client project data

In the course of performing accessibility audits, we access and analyze client websites and applications. Any personal data encountered during the audit (e.g., user interface elements, test accounts provided by the client) is processed solely for the purpose of performing the contracted audit services. Legal basis: Art. 6(1)(b) GDPR. Audit data is stored securely, access-restricted, and deleted 90 days after project completion unless a longer retention is agreed.

8. AI-assisted processing

As part of our audit process, we use AI tools provided by Anthropic, PBC (548 Market St, PMB 90375, San Francisco, CA 94104, USA) to assist with visual analysis, alt text evaluation, and contrast assessment. Screenshots or page content from client websites may be processed through Anthropic's API. Anthropic does not use data submitted via its API to train models and deletes inputs/outputs within 30 days. Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient audit delivery). See Anthropic's privacy policy.

9. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure of your data (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)

To exercise any of these rights, email info@complytiq.com. We will respond within 30 days.

10. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Bulgaria is the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria — www.cpdp.bg.

11. Changes to this policy

We may update this privacy policy to reflect changes in our practices or legal requirements. The current version is always available at this URL. Material changes will be noted with an updated "last updated" date.